last executing test programs: 7m23.0598338s ago: executing program 3 (id=178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000019300)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="151416"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x20, 0x4c, {0x4c, 0xb, "3385dfe04d8e5cb3a7a1f1f969065a7e0ed422a11d368609066c845b5bda7997b22aedbb12cca2a474185ba9c99290d714de5716cba07abe97d6fc2fffc594669029c147b8b910a5b6ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x114, &(0x7f0000000040)={[{0x32, 0x4e00, "6d49ca39fa77f23d27f25456abf61dfc1912e678cbb88916426c9a0cd5204ec91cdff01cc3aa38227aeb2fbc35dab6dd6dbb"}, {0xd8, 0x4e00, "c6a67ce95d4d9c68c31b5c70c85ca3a9e024149bcf1be0094768f1b692a5b1ec2b8e27735a02793b4870ff6da7b1e3b3bb14e8db35153dc0fb146a15680e6eace33ced4b1963860355a4422f5a5757a3e99bf31e629fe4b093b6e5c71c5b86f708dfdff0d056fe098184b0461b65f5a23cd27dfb03e7edc52d568b60635a7979e39c95b73dfad78f9ff8d493979fd7405246e5d8d48196cf71a534a9c318bba9725fb971815364f0381a56956bf1a3492c38981b83e6b529459e44704709409fb0b656efb4231b74672505db0d07f0a22fa1fba262f283c0"}]}) 7m21.314183046s ago: executing program 3 (id=182): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000080)) syz_clone(0x5000, 0x0, 0xfffffffffffffd57, 0x0, 0x0, 0x0) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) 7m20.653463412s ago: executing program 3 (id=184): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full', 0x20, 0x3, 0x20, 0xfffffffffffffff9}, 0x2f) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048014000180090001006c61737400007900040002802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c0000001400000011000100"], 0xf4}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) 7m20.580574373s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000febcb420fc043102a96f01ed020109022b00010000001009046e0002e76e460009050000f9ffffff000705db224370bf09050b02"], 0x0) 7m19.318867175s ago: executing program 3 (id=193): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/100}}}}}}, 0x0) 7m19.022762715s ago: executing program 3 (id=197): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbaj\x85+\xbc\xf8T\xc7a\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i=\xfd-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/217}, {0x20, ' '}, {0x20, '\x1b_G\x86~)\x18\x95\x96\xb9\xff\xa4W\xf4]\xea\x88\xeb;\n:\x19\xb0\xb5Fn\xae\xbc\x047/\x1d\xe6,b%\xfd_W\x1f\xb8\x0ex\xe5\xdd0\xd2\x11\xc4\xfc\x13\xa7\x1du\xa4\xc8_7Rv\x1e\x02\xca\x1am\xe6uW\xc50\x80F$\x9cXV\xe6c\xb6\xc0\xf3\x17\x93\xe1a_'}, {0x20, '\x7f}'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}]}, 0x284) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d960001000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 7m18.464844522s ago: executing program 32 (id=197): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.st\xc9\x87(\x16\x83!at\x00M\xdc\xac\xa4,h\x84\x9e \xa3\xc9&!\xe6\x9fc\x89\xa0\x9d\x01d\xd3gR\x8dQ!\xb4O\x13m\x90\xa3\x7f\xde\xec\\\xf8\x7f\xd7%p\xb7i\xc1\xf8\xbd&\x8c/\x83\xd9\xbb\xb0\xb8\x0f\x82.>X\xa5d|\x13\xce\fy\xa8\x04\x9e\xfe\x94;l\\\x19>d\xe9\xcf\x9e4`\xa6\xdf\xb33\x90\xca\x93\xc4-\x05H\x00\x00\x00'}, {0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbaj\x85+\xbc\xf8T\xc7a\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i=\xfd-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/217}, {0x20, ' '}, {0x20, '\x1b_G\x86~)\x18\x95\x96\xb9\xff\xa4W\xf4]\xea\x88\xeb;\n:\x19\xb0\xb5Fn\xae\xbc\x047/\x1d\xe6,b%\xfd_W\x1f\xb8\x0ex\xe5\xdd0\xd2\x11\xc4\xfc\x13\xa7\x1du\xa4\xc8_7Rv\x1e\x02\xca\x1am\xe6uW\xc50\x80F$\x9cXV\xe6c\xb6\xc0\xf3\x17\x93\xe1a_'}, {0x20, '\x7f}'}, {0x20, '#:[(@'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}]}, 0x284) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d960001000000000000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 11.547980305s ago: executing program 2 (id=1847): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x986}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="3527b54d41ecf3f9dc08d36268d31e27b8f6a2d3b151add627d47eecb896c0e9f4688b0113a7a68f4f1056ce1544e2936e25b3aa8fd89c1d70f853fee05ad6f1d598ff9b6a7e9385fa0af587000000000000004cda8351b517b37ae29b81280e71f91420765d85da0e3a1d3f7db585581ecb8ef3a319d49bfc2e49c738d9605d394c2e740ec7cad23cf7371bceb3cbfb72e764eed240bca17ebd2381309939f891e52b517a29c5d890cb9e39e7133e288a29192d7b0e3f7546563c5923a842663fac366cd3b537c51b35", &(0x7f0000000080)="dd43f4cb84627a707732802cd93af4ce2153f3bb39fa248a417519772bc641a75dd8c350f3d15adefbdd472cc041de"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0x94}, 0x1, 0x0, 0x0, 0x7062babc7169ac28}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="54000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$MSR(0x0, 0xbd, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xb8f6, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) 9.482246823s ago: executing program 2 (id=1848): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$MSR(0x0, 0xbd, 0x0) r6 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000), 0x0) 7.924265887s ago: executing program 2 (id=1853): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)='[', 0x1}], 0x1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2c9c3, 0x2) fcntl$setlease(r3, 0x400, 0x1) close(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x80, 0x0, 0x10000, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000002c0)={0x0, 0x7}) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x0, @scatter={0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/62, 0x3e}]}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x4, 0x15, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703647463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0x100, 0x9]}) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.372157472s ago: executing program 4 (id=1856): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) 6.395656117s ago: executing program 4 (id=1857): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) mkdir(0x0, 0x22) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x5, 0x3c5b, 0x1, 0x22, 0x40000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x7, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x17fff, 0x6, 0x400, 0x78, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5d2d, 0xb, 0x4e0, 0x381, 0x4, 0xc, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x101, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xa, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x303e, 0x3e8, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x6dd048af, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x1ab, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1e, 0x120000, 0x7ff, 0x2009, 0x2, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x8, 0xb9, 0xce4, 0x10, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x90000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x20b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0xfffffffb, 0x400, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(r2, r2) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x48004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) capset(0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) 5.947783243s ago: executing program 0 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) syz_emit_ethernet(0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffacc8ffffffbbbbbbbbbbbb0010"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66", 0xae}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000240)=""/156, 0x9c}], 0x2}, 0x10041) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r7}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'sha512-ssse3\x00'}}, 0x0, 0x0) getpid() 5.911769294s ago: executing program 4 (id=1860): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) close(0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e22, 0x8a, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000002}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hopopts={{0xf0, 0x29, 0x36, {0x2b, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0xba, 0xfff8, [0x10]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xa0}, @generic={0x32, 0xac, "ce79ce5a8aec5cdb97202a8b692d04077bc3961ecd64f9161c01ec7500e5156d1c9f5c27029843aba8fc43a9261ef11f4ab60fcdbeee059f667af3f08ade502f354b5a8b020eb04917381b5db8b538f24378ade3803c6680c8fd9d5cc6b49631138eb5a8780f836f109e71560ce0c938db7c05f4bd25297f8e0f26144dc131616e1755e9548654b5dba1169c122fc27b08e38554356b0525512c0beecd11a4a6fa076ac84ca37c5b4fac4451"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3a, 0x10, 0x31cf63d700d78fc0, 0x7, 0x0, [@local, @loopback, @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @mcast2, @loopback]}}}], 0x1b0}, 0x20000010) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$hiddev(0x0, 0x0, 0x200) 4.831437081s ago: executing program 2 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000540)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x101}) 4.086939354s ago: executing program 0 (id=1866): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) (fail_nth: 3) 3.857765452s ago: executing program 5 (id=1867): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x4, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) select(0x40, &(0x7f0000000080)={0x9, 0x9, 0x9d32, 0x58, 0x3, 0x1, 0x7, 0xd}, &(0x7f0000001140)={0xe, 0x81, 0x2556, 0x8, 0x8, 0x4, 0x8, 0x10001}, &(0x7f0000001180)={0x11e, 0x49c5, 0x8, 0x100000000, 0x3f, 0xffffffffffffffb5, 0x0, 0x5}, &(0x7f00000011c0)={0x77359400}) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0) 3.43942066s ago: executing program 2 (id=1868): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) mount$fuse(0x0, 0x0, 0x0, 0x900010, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC, @ANYBLOB=',default_permissions,default_p']) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000580)="95c19dc30153e1b1b8d8f7b54432438ca1b2caa5ce29493ead0e8d872e5d589174b94db1c6846a314d599466fbb17e1e433228d07388b12475533e83db46ab09e960ca8efab35d1edb4a71cedbfcbfd7e26907370ec105da1c38a81418a8ef4193b3318200c89cbe2565e84ae5c9c25338c8cd34e0a4714a11", 0x79) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 3.205693486s ago: executing program 1 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000600000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 2.876107685s ago: executing program 2 (id=1870): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300), 0x0, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) syz_usb_connect(0x5, 0x1b, 0x0, 0x0) 2.644630389s ago: executing program 1 (id=1871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xca00, 0x0, 0xf0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.468109437s ago: executing program 0 (id=1872): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 2.275002126s ago: executing program 5 (id=1873): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2.273700534s ago: executing program 1 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.151975965s ago: executing program 5 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.915486418s ago: executing program 4 (id=1876): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000003f00000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 1.859277185s ago: executing program 5 (id=1877): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240058c4}, 0x4018004) recvmsg$can_raw(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) r3 = syz_io_uring_setup(0x159b, &(0x7f0000000200)={0x0, 0x9e3e, 0x2, 0x80000, 0x19b}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.854778232s ago: executing program 0 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000540)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x101}) 1.601472383s ago: executing program 1 (id=1879): socket$vsock_stream(0x28, 0x1, 0x0) 840.046704ms ago: executing program 1 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310011000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000780090001006c6173740000000004000280140001800c000100636f756e746572020400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 839.736991ms ago: executing program 4 (id=1881): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000068000100000000000000000002000000000000000c000880050005000000000008000500aa7e4fe7a772fe4708f414d7c10c2b9bf5831d14acc4a46dca3c0528fcf351993b1499109cdd0cbbc10b3925829fc6fbfadf626e1aad2444c3d54abcdfd67ac63fab4719efef69bafe94b40c6e73b29178fea4cc6b3299c2980658e403cc763d81491d6f7490f4de44dc4979f0cd64afd1ab84cf3579a152c3bd157c5e0faa8ecf78e02a717a", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) 375.232213ms ago: executing program 5 (id=1882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c40)={'syz0\x00', {0x1, 0xfffd, 0x8, 0xa}, 0x54, [0x4, 0x4, 0x5, 0x80000000, 0x0, 0x5, 0x0, 0x8, 0x3, 0x4, 0x4, 0xa, 0x3, 0x400, 0x40, 0x800, 0x0, 0x1000, 0x5, 0x0, 0x5, 0x8, 0x2, 0xa, 0x101, 0xf, 0x8, 0x9, 0x5, 0xfffffff7, 0x3, 0x7, 0x4, 0x3, 0x8001, 0x2, 0xfa, 0x9, 0x2, 0x0, 0x1ff, 0x9, 0xf, 0x11, 0xfffffffa, 0x2, 0x2, 0xffffffff, 0x9, 0x3, 0x9, 0x2, 0x9, 0x2, 0xd, 0x1, 0x2, 0x8, 0x4, 0x3ff, 0xffff, 0x6, 0x3, 0x401], [0x6c68, 0xd5, 0x8000, 0x7, 0x0, 0x4, 0x48e8, 0x7, 0x7, 0x100, 0x81, 0x3, 0x7fffffff, 0x80, 0x6, 0x33c, 0x9, 0x3, 0xf4b0, 0x8, 0x4, 0x3, 0xf, 0x5, 0x8, 0x10000, 0x1000, 0x3, 0xf, 0xffff, 0x7, 0x5, 0x80, 0x4, 0x71bcccaa, 0x2, 0x7, 0x2, 0x2, 0x7ff, 0x0, 0xc, 0x5, 0x0, 0x5, 0x2, 0x9, 0xf26, 0x7, 0x1, 0x4, 0x3, 0x10, 0x10000, 0x9, 0x8, 0x8, 0x10, 0x400, 0x1, 0xffff92e3, 0x1, 0x45, 0xd6], [0x1, 0x10000, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x5, 0x1, 0xdb, 0x8, 0x7f, 0x0, 0x111, 0x5, 0x800, 0x9, 0xa10, 0x3, 0xf4, 0xfffffff8, 0x40, 0x9d1, 0x40d, 0x1, 0x8, 0x8, 0x0, 0x5, 0x80000001, 0x6ed8, 0x8, 0x7fff, 0x8, 0x1, 0xe4, 0x400, 0x8001, 0x1, 0x7f, 0x49b69763, 0x8, 0x2, 0x2ea2, 0xffff33b1, 0x9, 0x9, 0x7, 0x0, 0x10, 0x7, 0x7dc622d4, 0x6, 0x101, 0x800, 0x5000000, 0x2, 0xf11c, 0x0, 0x3, 0xb, 0x9, 0x9, 0x5], [0x1, 0x4, 0x9607, 0xffffffff, 0x0, 0xff, 0x0, 0x1, 0x1, 0x80000000, 0xe, 0x2, 0x5, 0x78b, 0x5, 0x9, 0x1, 0x4, 0x4b, 0x1000, 0x5, 0x3a9bc7ce, 0x1, 0xd80, 0x7, 0xfffffffd, 0xfffffc01, 0xa, 0x9, 0x9, 0x1, 0x6, 0x4, 0x7, 0x2000009, 0x4, 0x5, 0x0, 0x8, 0x1, 0x401, 0x4, 0x1, 0x4, 0xffff, 0x11, 0x3, 0xe5e, 0xfffff60d, 0x7, 0x4, 0x7fffffff, 0x9, 0x8, 0x80, 0xfff, 0x3c6d9567, 0x4e603841, 0x7c, 0x532, 0x0, 0x6bc, 0x6, 0x7]}, 0x45c) mmap(&(0x7f0000559000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, r1, 0x8211000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/wireless\x00') preadv(r4, &(0x7f0000001580)=[{&(0x7f0000001500)=""/27, 0x1b}], 0x1, 0xb537, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000140), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x12) r8 = socket(0x23, 0x5, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) listen(r8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 337.796877ms ago: executing program 1 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000059d06b00b4b35d7a3612ec52ae6f8b02c2c79f3621389ab0796d8488b0584d2a404622c6045dab6e441c9f903d0bd10b2f6d16164f93866e2d41d6bd1099358c07659665d429a24993f4cd9fb18622603b", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 267.892777ms ago: executing program 4 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prlimit64(r1, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb00ff94000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) syz_open_dev$tty1(0xc, 0x4, 0x1) 214.778085ms ago: executing program 0 (id=1885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)={0xb8, 0xffffffffffffffda, 0x0, [{{0x1, 0x1, 0xb, 0x7, 0x7, 0x9, {0x6, 0x81, 0xfff, 0x5, 0x988c, 0x62c, 0x749, 0x81, 0x1, 0x6000, 0x4, 0x0, 0x0, 0x7b7, 0xffff}}, {0x5, 0x9, 0x9, 0x80, 'skcipher\x00'}}]}, 0xb8) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) unshare(0x2a020400) unshare(0x2000400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x8, 0x1}, 0xe) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009800)=@newchain={0x24, 0x64, 0x5b5db92f4c13419d, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x2, 0x1}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000080)={0x8, 'team_slave_1\x00', {'veth0_to_bridge\x00'}, 0x2}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) symlink(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup/file0\x00') (async) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000040)) (async) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = dup2(r8, r8) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r9, &(0x7f0000004d80)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r9, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) (async) ioctl$int_in(r9, 0x5421, &(0x7f0000000140)=0xfffffffffffffffa) 170.751629ms ago: executing program 5 (id=1886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600000009049a00027ed72592090503f532"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x0, [{0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7fffffff, 0x0}, {0x2, 0x0, 0x5b3, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461a6683ec19d3e48489bffa5602001300111200000f0000ff3f210000001700000000e0da8979d2fc6ca9e48270faf047", 0x35}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1887): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): b 2-1: USB disconnect, device number 45 [ 423.142570][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 423.333056][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 423.359037][ T24] usb 3-1: config 3 has an invalid interface number: 184 but max is 0 [ 423.379901][ T24] usb 3-1: config 3 has an invalid interface number: 22 but max is 0 [ 423.400569][ T24] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 423.430023][ T24] usb 3-1: config 3 has no interface number 0 [ 423.450509][ T24] usb 3-1: config 3 has no interface number 1 [ 423.467157][ T24] usb 3-1: config 3 interface 184 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 423.492559][ T24] usb 3-1: config 3 interface 184 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 423.533816][ T24] usb 3-1: config 3 interface 184 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 423.569517][ T24] usb 3-1: too many endpoints for config 3 interface 22 altsetting 182: 52, using maximum allowed: 30 [ 423.585082][ T24] usb 3-1: config 3 interface 22 altsetting 182 has a duplicate endpoint with address 0xF, skipping [ 423.596067][ T24] usb 3-1: config 3 interface 22 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 423.607105][ T24] usb 3-1: config 3 interface 22 altsetting 182 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 423.618330][ T24] usb 3-1: config 3 interface 22 altsetting 182 has a duplicate endpoint with address 0x8, skipping [ 423.648125][ T24] usb 3-1: config 3 interface 22 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 423.674358][ T24] usb 3-1: config 3 interface 22 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 423.739497][ T24] usb 3-1: config 3 interface 22 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 423.774297][ T24] usb 3-1: config 3 interface 22 altsetting 182 has 10 endpoint descriptors, different from the interface descriptor's value: 52 [ 423.810483][ T24] usb 3-1: config 3 interface 184 has no altsetting 0 [ 423.840268][ T24] usb 3-1: config 3 interface 22 has no altsetting 0 [ 423.874372][ T30] kauditd_printk_skb: 468 callbacks suppressed [ 423.874392][ T30] audit: type=1400 audit(2000000263.888:1906): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.932624][ T24] usb 3-1: Dual-Role OTG device on HNP port [ 423.942022][ T24] usb 3-1: New USB device found, idVendor=dd02, idProduct=86dc, bcdDevice=f1.fc [ 423.966149][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.978153][ T30] audit: type=1400 audit(2000000263.888:1907): avc: denied { ioctl } for pid=11395 comm="syz.4.1482" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.013546][ T24] usb 3-1: Product: syz [ 424.028122][ T24] usb 3-1: Manufacturer: syz [ 424.053739][ T24] usb 3-1: SerialNumber: syz [ 424.069529][ T30] audit: type=1400 audit(2000000263.918:1908): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.097729][ T5827] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 424.125967][ T30] audit: type=1400 audit(2000000263.918:1909): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.175540][ T30] audit: type=1400 audit(2000000263.928:1910): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.311826][ T24] usb-storage 3-1:3.184: USB Mass Storage device detected [ 424.352135][T11413] netlink: 'syz.5.1486': attribute type 4 has an invalid length. [ 424.389068][ T30] audit: type=1400 audit(2000000263.928:1911): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.403445][ T24] usb 3-1: USB disconnect, device number 53 [ 424.929222][ T30] audit: type=1400 audit(2000000263.938:1912): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.981888][ T5827] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.993872][ T5827] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.017502][ T30] audit: type=1400 audit(2000000263.938:1913): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.132553][ T5827] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.146466][ T5827] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 425.161719][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.171531][ T30] audit: type=1400 audit(2000000263.948:1914): avc: denied { ioctl } for pid=11377 comm="syz.2.1477" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.210860][T11396] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.264264][T11421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.488001][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 425.562731][ T5884] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 425.820899][T11396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.831848][T11396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.839853][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 426.392323][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.406503][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.416287][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 426.429580][ T5884] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 426.438895][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.461602][ T5884] usb 1-1: config 0 descriptor?? [ 426.714061][ T5824] Bluetooth: hci3: unexpected event for opcode 0x080f [ 426.741173][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.758682][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.804731][ T5827] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 426.816792][ T5827] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input15 [ 426.862716][ T5891] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 426.884762][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 426.895133][ T5827] usb 5-1: USB disconnect, device number 34 [ 426.950960][ T5884] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 427.012484][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 427.052663][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 427.112463][ T5884] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 427.131386][ T5891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 427.144106][ T5884] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 427.162596][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.170595][ T5891] usb 6-1: Product: syz [ 427.199882][ T5891] usb 6-1: Manufacturer: syz [ 427.208871][ T5891] usb 6-1: SerialNumber: syz [ 427.218795][ T24] usb 2-1: config index 0 descriptor too short (expected 65307, got 27) [ 427.227030][ T5891] usb 6-1: config 0 descriptor?? [ 427.247622][ T24] usb 2-1: config 49 has too many interfaces: 255, using maximum allowed: 32 [ 427.289179][ T24] usb 2-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 427.333935][ T24] usb 2-1: config 49 has 0 interfaces, different from the descriptor's value: 255 [ 427.349389][ T24] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 427.360660][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.373482][T11421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.382661][T11421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.388879][T11421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.421821][T11421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 427.439886][T11421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.474801][ T5891] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 427.520133][ T5827] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 427.531777][ T5947] usb 1-1: USB disconnect, device number 59 [ 427.581202][ T5827] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.631610][ T5827] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.709841][ T5891] usb write operation failed. (-71) [ 427.728671][ T5827] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.785786][ T5891] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 427.822905][ T5891] dvbdev: DVB: registering new adapter (Terratec H7) [ 427.829626][ T5891] usb 6-1: media controller created [ 427.842580][ T5891] usb read operation failed. (-71) [ 427.844318][T11440] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1493'. [ 427.848054][ T5891] usb write operation failed. (-71) [ 427.944475][ T5891] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 428.017578][ T5891] usb 6-1: USB disconnect, device number 31 [ 428.080127][T11440] hsr_slave_1 (unregistering): left promiscuous mode [ 428.372684][ T24] usb 2-1: string descriptor 0 read error: -71 [ 428.393160][ T24] usb 2-1: USB disconnect, device number 46 [ 428.596926][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 428.908764][ T30] kauditd_printk_skb: 398 callbacks suppressed [ 428.908784][ T30] audit: type=1400 audit(2000000268.908:2311): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 428.981010][ T30] audit: type=1400 audit(2000000268.908:2312): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.006377][ T5891] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 429.062550][ T30] audit: type=1400 audit(2000000268.908:2313): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.096184][ T30] audit: type=1400 audit(2000000268.958:2314): avc: denied { read write } for pid=11469 comm="syz.2.1503" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 429.163083][ T30] audit: type=1400 audit(2000000268.958:2315): avc: denied { read write open } for pid=11469 comm="syz.2.1503" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 429.197320][ T30] audit: type=1400 audit(2000000268.958:2316): avc: denied { execmem } for pid=11469 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 429.230360][ T30] audit: type=1400 audit(2000000268.958:2317): avc: denied { ioctl } for pid=11466 comm="syz.5.1501" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.232595][ T24] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 429.315820][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 429.336947][ T5891] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 429.363338][ T5891] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 429.385423][ T30] audit: type=1400 audit(2000000268.988:2318): avc: denied { read write } for pid=11471 comm="syz.0.1502" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.411165][ T5891] usb 6-1: config 8 has no interface number 0 [ 429.412654][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 429.423890][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 429.432859][ T30] audit: type=1400 audit(2000000268.998:2319): avc: denied { read write open } for pid=11471 comm="syz.0.1502" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.465364][ T30] audit: type=1400 audit(2000000268.998:2320): avc: denied { ioctl } for pid=11471 comm="syz.0.1502" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.493153][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 429.500420][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 429.537720][ T5891] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.619991][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.713167][ T5891] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 429.713185][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.713196][ T5891] usb 6-1: Product: syz [ 429.713205][ T5891] usb 6-1: Manufacturer: syz [ 429.713213][ T5891] usb 6-1: SerialNumber: syz [ 430.098341][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 430.098369][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.098388][ T24] usb 1-1: Product: syz [ 430.098402][ T24] usb 1-1: Manufacturer: syz [ 430.098416][ T24] usb 1-1: SerialNumber: syz [ 430.111333][ T24] usb 1-1: config 0 descriptor?? [ 430.316526][T11467] Attempt to restore checkpoint with obsolete wellknown handles [ 430.758310][T11493] netlink: 'syz.2.1506': attribute type 28 has an invalid length. [ 430.766392][T11493] netlink: 'syz.2.1506': attribute type 3 has an invalid length. [ 430.774314][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1506'. [ 430.834840][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.074770][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 431.115709][ T24] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 431.134702][ T24] usb 2-1: config 0 has no interface number 0 [ 431.154982][ T24] usb 2-1: config 0 interface 48 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 64 [ 431.175811][ T24] usb 2-1: config 0 interface 48 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.357420][T11494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 431.408802][ T24] usb 2-1: config 0 interface 48 has no altsetting 0 [ 431.487984][ T24] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 431.513297][ T5891] usb 6-1: USB disconnect, device number 32 [ 431.527052][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.552590][ T24] usb 2-1: Product: syz [ 431.561841][ T24] usb 2-1: Manufacturer: syz [ 431.578403][ T24] usb 2-1: SerialNumber: syz [ 431.596349][ T24] usb 2-1: config 0 descriptor?? [ 431.632278][T11490] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 431.656343][ T24] HFC-S_USB 2-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 432.531256][T11505] Invalid logical block size (18) [ 432.630338][ T5827] usb 1-1: USB disconnect, device number 60 [ 432.642714][ T5891] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 432.708131][ T24] usb 2-1: USB disconnect, device number 47 [ 432.823134][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 432.823453][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 432.869241][ T5891] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 432.903142][ T5891] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 432.932153][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 432.964673][ T5891] usb 6-1: Product: syz [ 432.970973][ T5891] usb 6-1: Manufacturer: syz [ 432.991575][ T5891] usb 6-1: SerialNumber: syz [ 433.125733][ T5891] usb 6-1: config 0 descriptor?? [ 433.135335][T11503] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 433.146740][ T5891] hub 6-1:0.0: bad descriptor, ignoring hub [ 433.146766][ T5891] hub 6-1:0.0: probe with driver hub failed with error -5 [ 433.913675][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 433.913690][ T30] audit: type=1400 audit(2000000273.928:2635): avc: denied { perfmon } for pid=11518 comm="syz.1.1515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.377210][ T30] audit: type=1400 audit(2000000273.958:2636): avc: denied { bpf } for pid=11518 comm="syz.1.1515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.461392][ T30] audit: type=1400 audit(2000000273.958:2637): avc: denied { read } for pid=11524 comm="syz.4.1518" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.519948][ T30] audit: type=1400 audit(2000000273.958:2638): avc: denied { read open } for pid=11524 comm="syz.4.1518" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.566004][ T30] audit: type=1400 audit(2000000273.968:2639): avc: denied { bpf } for pid=11518 comm="syz.1.1515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.606228][ T30] audit: type=1400 audit(2000000273.968:2640): avc: denied { perfmon } for pid=11518 comm="syz.1.1515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.679030][ T30] audit: type=1400 audit(2000000273.968:2641): avc: denied { prog_load } for pid=11518 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 434.793025][ T30] audit: type=1400 audit(2000000273.968:2642): avc: denied { bpf } for pid=11518 comm="syz.1.1515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.862592][ T30] audit: type=1400 audit(2000000273.968:2643): avc: denied { bpf } for pid=11518 comm="syz.1.1515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.894981][ T30] audit: type=1400 audit(2000000273.968:2644): avc: denied { perfmon } for pid=11518 comm="syz.1.1515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.943653][ T5884] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 435.083332][ T5891] usb 6-1: USB disconnect, device number 33 [ 435.112553][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 435.175268][ T5884] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 435.194599][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.246706][ T5884] usb 5-1: Product: syz [ 435.250889][ T5884] usb 5-1: Manufacturer: syz [ 435.371129][ T5884] usb 5-1: SerialNumber: syz [ 435.493840][ T5884] usb 5-1: config 0 descriptor?? [ 435.504265][ T5884] gspca_main: sq930x-2.14.0 probing 2770:930c [ 435.634112][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 435.673898][T11542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.080315][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.105056][ T5884] gspca_sq930x: reg_r 001f failed -110 [ 436.111287][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.123026][ T5884] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 436.822572][ T5827] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 436.881748][T11560] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 436.992577][ T5827] usb 3-1: Invalid ep0 maxpacket: 32 [ 437.037372][T11557] kvm: kvm [11555]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 437.047591][T11557] kvm: kvm [11555]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 437.122613][ T5827] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 437.294867][T11572] tmpfs: Bad value for 'mpol' [ 437.304253][ T5827] usb 3-1: Invalid ep0 maxpacket: 32 [ 437.318050][ T5827] usb usb3-port1: attempt power cycle [ 437.483960][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1530'. [ 437.672669][ T5827] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 437.684617][ T911] usb 5-1: USB disconnect, device number 35 [ 437.716019][ T5827] usb 3-1: Invalid ep0 maxpacket: 32 [ 437.852684][ T5827] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 437.894903][ T5827] usb 3-1: Invalid ep0 maxpacket: 32 [ 437.900566][ T5827] usb usb3-port1: unable to enumerate USB device [ 438.922825][ T30] kauditd_printk_skb: 397 callbacks suppressed [ 438.922841][ T30] audit: type=1400 audit(2000000278.938:3042): avc: denied { ioctl } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.965068][ T30] audit: type=1400 audit(2000000278.958:3043): avc: denied { perfmon } for pid=11594 comm="syz.4.1535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 438.990502][ T30] audit: type=1400 audit(2000000278.998:3044): avc: denied { perfmon } for pid=11594 comm="syz.4.1535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.013507][ T30] audit: type=1400 audit(2000000278.998:3045): avc: denied { perfmon } for pid=11594 comm="syz.4.1535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.036961][ T30] audit: type=1400 audit(2000000278.998:3046): avc: denied { perfmon } for pid=11594 comm="syz.4.1535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.177806][ T30] audit: type=1400 audit(2000000279.058:3047): avc: denied { perfmon } for pid=11594 comm="syz.4.1535" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.239473][ T30] audit: type=1400 audit(2000000279.058:3048): avc: denied { bpf } for pid=11594 comm="syz.4.1535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.385822][ T30] audit: type=1400 audit(2000000279.178:3049): avc: denied { mounton } for pid=11594 comm="syz.4.1535" path="/322" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 439.550137][ T30] audit: type=1400 audit(2000000279.178:3050): avc: denied { module_request } for pid=11598 comm="syz.1.1536" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 439.604835][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.611153][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.688310][ T30] audit: type=1400 audit(2000000279.448:3051): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.407781][T11609] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 440.419921][T11609] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 440.752812][ T911] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 441.112761][ T911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.614792][ T911] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 441.627205][T11622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.637367][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.663076][T11622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.923933][ T911] usb 5-1: Product: syz [ 441.932336][ T911] usb 5-1: Manufacturer: syz [ 441.938819][ T911] usb 5-1: SerialNumber: syz [ 441.970262][ T911] usb 5-1: config 0 descriptor?? [ 442.052706][ T55] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 442.212597][ T5827] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 442.229897][ T55] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 442.249209][ T55] usb 6-1: config 16 has no interface number 0 [ 442.260955][ T911] usb 5-1: USB disconnect, device number 36 [ 442.293248][ T55] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 442.327977][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.345369][ T55] usb 6-1: Product: syz [ 442.352331][ T55] usb 6-1: Manufacturer: syz [ 442.358926][ T55] usb 6-1: SerialNumber: syz [ 442.392611][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 442.402363][T11635] Bluetooth: MGMT ver 1.23 [ 442.407082][T11635] Bluetooth: hci1: too big key_count value 32778 [ 442.443133][ T5827] usb 2-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.488214][ T5827] usb 2-1: config 1 interface 0 has no altsetting 0 [ 442.676101][ T5827] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.40 [ 442.800016][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.886042][ T55] usb 6-1: USB disconnect, device number 34 [ 442.892006][ T5827] usb 2-1: Product: 쬑佶㡛㱚ĩәꞪ栜樾㿭㿥ͅí±è ˜ë¡Í¿ê²¨ê´›ë£±é袼೗é”牿Ệᡢ⃄鿇á¾æ¬µë€á¼›ç¦¢ëº·å·äŸ–㖗㴨쿟ѩ蓃â®ì´æ„‘笣ê­æž”ຜå¯ì†±éˆ–陫ᣎⲣì®æº”鼟뱩誟淋紩煄 [ 442.892036][ T5827] usb 2-1: Manufacturer: à°Š [ 442.981955][ T5827] usb 2-1: SerialNumber: 髩쯥䑴⋑᳚í¶èˆŸä²¤å½ èš°î¡…삦둾鶀Њ삅씆爉๕숱焇ଗâ³å½Šã±‹Ä跈븾硿á¢é†¼ä©µâ¾Œí…¯Õ∅㈨ﻠỉäœêš…䞮ʫ쒖ᒡ禖益ꩳ迗～삥ꄉ枀뿊뇈éŸçŽ»âª¿æ ’â¿·ã¨ç¯¬î„†ï ¬à¶«ï¨•ï‘¤à¡–谫뮼î“æ¡Ÿï¸çŽŸì¡ì‹€ç’¤ä²¤ëºªÄ¡ï·³î’§âŽ¼ì»Šàµà§§ï·² [ 443.063976][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.213600][ T30] kauditd_printk_skb: 307 callbacks suppressed [ 444.213615][ T30] audit: type=1400 audit(2000000284.228:3359): avc: denied { ioctl } for pid=11626 comm="syz.1.1544" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.492904][T11641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11641 comm=syz.4.1547 [ 445.321947][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.428104][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.453304][ T30] audit: type=1400 audit(2000000284.288:3360): avc: denied { ioctl } for pid=11626 comm="syz.1.1544" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.485765][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1548'. [ 445.571424][ T30] audit: type=1400 audit(2000000284.288:3361): avc: denied { create } for pid=11626 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.665276][ T5827] usbhid 2-1:1.0: can't add hid device: -71 [ 445.672035][ T5827] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 445.672562][ T30] audit: type=1400 audit(2000000284.318:3362): avc: denied { read write } for pid=11626 comm="syz.1.1544" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 445.729043][ T5827] usb 2-1: USB disconnect, device number 48 [ 445.806154][ T30] audit: type=1400 audit(2000000285.328:3363): avc: denied { read write open } for pid=11626 comm="syz.1.1544" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.016774][T11658] netlink: 'syz.5.1551': attribute type 8 has an invalid length. [ 446.221503][ T30] audit: type=1400 audit(2000000285.328:3364): avc: denied { ioctl } for pid=11626 comm="syz.1.1544" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.400795][T11665] netlink: 'syz.1.1554': attribute type 4 has an invalid length. [ 446.422790][T11662] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.429367][T11662] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 446.452557][ T30] audit: type=1400 audit(2000000285.328:3365): avc: denied { ioctl } for pid=11626 comm="syz.1.1544" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.503098][T11662] audit: backlog limit exceeded [ 446.544672][T11665] netlink: 'syz.1.1554': attribute type 4 has an invalid length. [ 447.787818][ T911] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 448.742693][ T911] usb 2-1: device descriptor read/64, error -71 [ 449.244513][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 449.244530][ T30] audit: type=1400 audit(2000000289.138:3572): avc: denied { bpf } for pid=11689 comm="syz.5.1560" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.380860][ T30] audit: type=1400 audit(2000000289.288:3573): avc: denied { prog_load } for pid=11689 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 449.459361][ T30] audit: type=1400 audit(2000000289.288:3574): avc: denied { bpf } for pid=11689 comm="syz.5.1560" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.552558][ T30] audit: type=1400 audit(2000000289.288:3575): avc: denied { create } for pid=11692 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.670334][ T30] audit: type=1400 audit(2000000289.308:3576): avc: denied { prog_load } for pid=11689 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 449.735137][ T30] audit: type=1400 audit(2000000289.308:3577): avc: denied { bpf } for pid=11689 comm="syz.5.1560" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.912674][ T30] audit: type=1400 audit(2000000289.308:3578): avc: denied { perfmon } for pid=11689 comm="syz.5.1560" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.912717][ T30] audit: type=1400 audit(2000000289.308:3579): avc: denied { perfmon } for pid=11689 comm="syz.5.1560" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.912753][ T30] audit: type=1400 audit(2000000289.308:3580): avc: denied { perfmon } for pid=11689 comm="syz.5.1560" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 449.912788][ T30] audit: type=1400 audit(2000000289.308:3581): avc: denied { perfmon } for pid=11689 comm="syz.5.1560" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 450.400415][ T5947] IPVS: starting estimator thread 0... [ 450.543302][T11712] IPVS: using max 38 ests per chain, 91200 per kthread [ 453.241112][T11738] sctp: [Deprecated]: syz.0.1570 (pid 11738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.241112][T11738] Use struct sctp_sack_info instead [ 454.224472][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1574'. [ 454.294571][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 454.294589][ T30] audit: type=1400 audit(2000000293.578:3812): avc: denied { execmem } for pid=11734 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 454.320788][ T30] audit: type=1400 audit(2000000293.938:3813): avc: denied { create } for pid=11744 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.341919][ T30] audit: type=1400 audit(2000000294.038:3814): avc: denied { write } for pid=11744 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.650606][ T30] audit: type=1400 audit(2000000294.138:3815): avc: denied { write } for pid=11744 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.736674][ T30] audit: type=1400 audit(2000000294.238:3816): avc: denied { write } for pid=11744 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.773777][ T5884] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 454.813243][ T30] audit: type=1400 audit(2000000294.308:3817): avc: denied { create } for pid=11741 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.892594][ T5947] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 454.928470][ T30] audit: type=1400 audit(2000000294.308:3818): avc: denied { create } for pid=11741 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.012609][ T30] audit: type=1400 audit(2000000294.308:3819): avc: denied { write } for pid=11741 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.014383][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 455.084227][ T30] audit: type=1400 audit(2000000294.328:3820): avc: denied { read } for pid=11741 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.150464][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 455.153688][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.182390][ T30] audit: type=1400 audit(2000000294.328:3821): avc: denied { read } for pid=11741 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.203271][ T5884] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 455.203299][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.213277][ T5884] usb 2-1: config 0 descriptor?? [ 455.243982][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.368274][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.119367][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.127588][ T5947] usb 5-1: Product: syz [ 456.131803][ T5947] usb 5-1: Manufacturer: syz [ 456.136509][ T5947] usb 5-1: SerialNumber: syz [ 456.679053][ T5884] ath6kl: Failed to submit usb control message: -71 [ 456.707704][ T5884] ath6kl: unable to send the bmi data to the device: -71 [ 456.768202][ T5884] ath6kl: Unable to send get target info: -71 [ 456.818769][ T5884] ath6kl: Failed to init ath6kl core: -71 [ 456.957770][ T5884] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 457.469618][ T5884] usb 2-1: USB disconnect, device number 51 [ 458.311749][T11788] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D†ü [ 458.354802][T11781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1581'. [ 458.589184][ T5898] usb 5-1: USB disconnect, device number 37 [ 458.649523][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1584'. [ 459.580664][T11811] vxfs: unable to read disk superblock at 1 [ 459.587233][T11811] vxfs: unable to read disk superblock at 8 [ 459.593216][T11811] vxfs: can't find superblock. [ 459.700858][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 459.700873][ T30] audit: type=1400 audit(2000000299.218:4055): avc: denied { execmem } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 459.721867][T11808] netlink: 'syz.1.1589': attribute type 4 has an invalid length. [ 459.726514][ T30] audit: type=1400 audit(2000000299.358:4056): avc: denied { write } for pid=11800 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 459.753745][ T30] audit: type=1400 audit(2000000299.368:4057): avc: denied { map_create } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 459.786781][ T30] audit: type=1400 audit(2000000299.368:4058): avc: denied { create } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.816119][ T30] audit: type=1400 audit(2000000299.368:4059): avc: denied { setopt } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.836548][ T30] audit: type=1400 audit(2000000299.368:4060): avc: denied { create } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.876570][ T30] audit: type=1400 audit(2000000299.368:4061): avc: denied { write } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.982185][ T30] audit: type=1400 audit(2000000299.368:4062): avc: denied { nlmsg_write } for pid=11804 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.079268][ T30] audit: type=1400 audit(2000000299.528:4063): avc: denied { read } for pid=11804 comm="syz.0.1588" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 460.131086][ T30] audit: type=1400 audit(2000000299.528:4064): avc: denied { read open } for pid=11804 comm="syz.0.1588" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 460.222889][ T55] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 461.843053][ T5898] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 462.026776][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 462.145951][ T5898] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 462.244191][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.471322][ T5898] usb 2-1: Product: syz [ 462.540488][ T5898] usb 2-1: Manufacturer: syz [ 462.687393][ T5898] usb 2-1: SerialNumber: syz [ 462.756800][ T5898] r8152-cfgselector 2-1: Unknown version 0x0000 [ 462.841192][ T5898] r8152-cfgselector 2-1: config 0 descriptor?? [ 463.654081][ T24] r8152-cfgselector 2-1: USB disconnect, device number 52 [ 464.764821][ T30] kauditd_printk_skb: 712 callbacks suppressed [ 464.764835][ T30] audit: type=1400 audit(2000000304.778:4777): avc: denied { write } for pid=11816 comm="syz.4.1590" path="socket:[35443]" dev="sockfs" ino=35443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.832636][ T30] audit: type=1400 audit(2000000304.828:4778): avc: denied { write } for pid=11816 comm="syz.4.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.856326][ T30] audit: type=1400 audit(2000000304.828:4779): avc: denied { write } for pid=11816 comm="syz.4.1590" path="socket:[35443]" dev="sockfs" ino=35443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.881556][ T30] audit: type=1400 audit(2000000304.838:4780): avc: denied { write } for pid=11816 comm="syz.4.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.983826][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1605'. [ 465.239319][T11890] audit: audit_backlog=65 > audit_backlog_limit=64 [ 465.273747][T11830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 465.280652][T11830] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 465.291044][T11830] audit: backlog limit exceeded [ 465.296037][ T30] audit: type=1400 audit(2000000304.838:4781): avc: denied { write } for pid=11816 comm="syz.4.1590" path="socket:[35443]" dev="sockfs" ino=35443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.322832][T11830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 465.493544][ T55] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 465.501321][ T55] usb 5-1: chopping to 0 config(s) [ 465.509159][ T55] usb 5-1: can't read configurations, error -32 [ 465.789518][ T55] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 465.943136][ T55] usb 5-1: device descriptor read/64, error -32 [ 466.106052][ T55] usb usb5-port1: attempt power cycle [ 466.672578][ T55] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 466.692960][ T55] usb 5-1: device descriptor read/8, error -32 [ 466.956311][ T55] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 467.009042][ T55] usb 5-1: device descriptor read/8, error -32 [ 467.356459][ T55] usb usb5-port1: unable to enumerate USB device [ 467.812575][ T5898] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 468.021831][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.068837][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice=eb.00 [ 468.168925][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.240516][ T5898] usb 3-1: config 0 descriptor?? [ 468.715141][ T5898] logitech 0003:046D:C295.0016: ignoring exceeding usage max [ 468.765857][ T5898] logitech 0003:046D:C295.0016: hidraw0: USB HID ve5.00 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 468.853300][ T5898] logitech 0003:046D:C295.0016: no inputs found [ 469.684052][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'. [ 469.693659][ T55] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 469.773680][ T30] kauditd_printk_skb: 1457 callbacks suppressed [ 469.773697][ T30] audit: type=1400 audit(2000000309.788:6142): avc: denied { write } for pid=11816 comm="syz.4.1590" path="socket:[35443]" dev="sockfs" ino=35443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 469.866967][ T55] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 469.885936][ T55] usb 1-1: config 0 has no interface number 0 [ 469.900839][T11830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.903172][T11943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.914082][T11830] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 469.921840][T11830] audit: backlog limit exceeded [ 469.924639][ T30] audit: type=1400 audit(2000000309.798:6143): avc: denied { ioctl } for pid=11928 comm="syz.0.1617" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.926819][T11943] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 469.962165][T11830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.968484][T11929] audit: audit_backlog=66 > audit_backlog_limit=64 [ 470.028184][T11929] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 470.051145][ T24] usb 3-1: USB disconnect, device number 58 [ 470.074919][ T55] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 470.096789][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.121285][ T55] usb 1-1: Product: syz [ 470.136267][ T55] usb 1-1: Manufacturer: syz [ 470.145988][ T55] usb 1-1: SerialNumber: syz [ 470.255826][ T55] usb 1-1: config 0 descriptor?? [ 470.492551][ T5898] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 470.694160][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.729332][ T55] usb 1-1: Firmware: major: 177, minor: 79, hardware type: HULUSB (4) [ 470.766784][ T5898] usb 6-1: config 127 has an invalid interface number: 106 but max is 0 [ 470.766812][ T5898] usb 6-1: config 127 has no interface number 0 [ 470.766848][ T5898] usb 6-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 470.766870][ T5898] usb 6-1: config 127 interface 106 has no altsetting 0 [ 470.840339][ T5898] usb 6-1: string descriptor 0 read error: -22 [ 470.840445][ T5898] usb 6-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 470.840468][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.951726][ T55] usb 1-1: failed to fetch extended address, random address set [ 470.952102][ T5898] ftdi_sio 6-1:127.106: FTDI USB Serial Device converter detected [ 471.066312][ T55] usb 1-1: USB disconnect, device number 61 [ 471.103569][ T5898] usb 6-1: Detected SIO [ 471.122611][ T5898] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 471.194487][ T5898] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.261900][ T5898] usb 6-1: USB disconnect, device number 35 [ 471.302041][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.349965][ T5898] ftdi_sio 6-1:127.106: device disconnected [ 471.632575][ T911] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 471.682947][ T5891] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 471.744955][T11951] pim6reg: entered allmulticast mode [ 471.871902][ T911] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.875557][ T5891] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 471.897009][ T911] usb 3-1: config 0 has no interface number 0 [ 471.922651][ T911] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 471.926627][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.978409][ T5891] usb 5-1: config 0 descriptor?? [ 471.992370][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.995111][ T5891] cp210x 5-1:0.0: cp210x converter detected [ 472.102251][ T911] usb 3-1: config 0 descriptor?? [ 472.168311][ T911] usb 3-1: selecting invalid altsetting 1 [ 472.193698][ T911] dvb_ttusb_budget: ttusb_init_controller: error [ 472.214870][ T911] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 472.585099][ T911] DVB: Unable to find symbol cx22700_attach() [ 472.831191][ T911] DVB: Unable to find symbol tda10046_attach() [ 472.845089][ T911] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 472.864612][ T911] usb 3-1: USB disconnect, device number 59 [ 472.903694][ T5891] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 472.932037][ T5891] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 472.949522][ T5891] usb 5-1: cp210x converter now attached to ttyUSB0 [ 472.975336][ T5891] usb 5-1: USB disconnect, device number 42 [ 473.025579][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 473.063034][ T5891] cp210x 5-1:0.0: device disconnected [ 474.805457][ T30] kauditd_printk_skb: 690 callbacks suppressed [ 474.805471][ T30] audit: type=1400 audit(2000000314.798:6773): avc: denied { prog_load } for pid=11994 comm="syz.5.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 475.150389][ T5891] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 475.167992][ T30] audit: type=1400 audit(2000000314.798:6774): avc: denied { bpf } for pid=11994 comm="syz.5.1636" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.309646][ T30] audit: type=1400 audit(2000000314.798:6775): avc: denied { perfmon } for pid=11994 comm="syz.5.1636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.331787][ T30] audit: type=1400 audit(2000000314.798:6776): avc: denied { perfmon } for pid=11994 comm="syz.5.1636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.356037][ T30] audit: type=1400 audit(2000000314.798:6777): avc: denied { perfmon } for pid=11994 comm="syz.5.1636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.392582][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 475.392674][ T30] audit: type=1400 audit(2000000314.798:6778): avc: denied { perfmon } for pid=11994 comm="syz.5.1636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.443111][ T30] audit: type=1400 audit(2000000314.798:6779): avc: denied { bpf } for pid=11994 comm="syz.5.1636" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.453045][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.464225][ T30] audit: type=1400 audit(2000000314.808:6780): avc: denied { read write } for pid=11994 comm="syz.5.1636" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.479898][ T5891] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 475.512309][T12011] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 475.531548][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.554838][ T30] audit: type=1400 audit(2000000314.808:6781): avc: denied { read write open } for pid=11994 comm="syz.5.1636" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.583830][ T30] audit: type=1400 audit(2000000314.808:6782): avc: denied { ioctl } for pid=11994 comm="syz.5.1636" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.595461][ T5891] usb 5-1: config 0 descriptor?? [ 475.608771][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.609131][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 475.638749][ T24] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.666519][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 475.690001][ T24] usb 6-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 475.708132][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.722603][ T24] usb 6-1: Product: syz [ 475.735542][ T24] usb 6-1: Manufacturer: syz [ 475.740425][ T24] usb 6-1: SerialNumber: syz [ 476.289313][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 476.304226][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 476.313371][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 476.611705][T12016] infiniband syz2: set active [ 476.616643][T12016] infiniband syz2: added vxcan1 [ 476.626039][ T5898] vxcan1 speed is unknown, defaulting to 1000 [ 476.666268][ T5891] zeroplus 0003:0C12:0005.0017: unknown main item tag 0x0 [ 476.686602][T12016] RDS/IB: syz2: added [ 476.692655][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 476.692739][ T5947] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 476.727997][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.736621][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.775393][ T5891] zeroplus 0003:0C12:0005.0017: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 476.934514][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 477.026779][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 477.120340][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 477.211086][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 477.302024][T12016] vxcan1 speed is unknown, defaulting to 1000 [ 477.392895][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.404834][ T5947] usb 2-1: config 0 descriptor?? [ 477.416870][ T5947] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 477.529048][ T5891] zeroplus 0003:0C12:0005.0017: no inputs found [ 477.621795][T12022] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1643'. [ 477.715533][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.724268][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.808640][ T24] usbhid 6-1:1.0: can't add hid device: -71 [ 477.816358][ T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 477.857933][ T24] usb 6-1: USB disconnect, device number 36 [ 478.042582][ T911] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 478.463756][ T24] usb 5-1: USB disconnect, device number 43 [ 478.476454][ T911] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.577344][ T911] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 478.594347][ T911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.609834][ T911] usb 3-1: Product: syz [ 478.621326][ T911] usb 3-1: Manufacturer: syz [ 478.628314][ T911] usb 3-1: SerialNumber: syz [ 478.662843][ T911] usb 3-1: config 0 descriptor?? [ 478.847682][T12027] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1644'. [ 479.985850][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 479.985867][ T30] audit: type=1400 audit(2000000319.208:7025): avc: denied { prog_load } for pid=12026 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 480.072621][ T911] usb 3-1: USB disconnect, device number 60 [ 480.102586][ T30] audit: type=1400 audit(2000000319.208:7026): avc: denied { bpf } for pid=12026 comm="syz.4.1644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.154676][ T5947] usb 2-1: USB disconnect, device number 53 [ 480.212068][ T30] audit: type=1400 audit(2000000319.218:7027): avc: denied { perfmon } for pid=12026 comm="syz.4.1644" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.286262][ T30] audit: type=1400 audit(2000000319.228:7028): avc: denied { perfmon } for pid=12026 comm="syz.4.1644" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.720630][T12043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 480.727213][T12043] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 480.735028][T12043] audit: backlog limit exceeded [ 480.763165][T12043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 480.769738][T12043] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 480.777510][T12043] audit: backlog limit exceeded [ 482.205900][T12074] netlink: 'syz.2.1655': attribute type 12 has an invalid length. [ 482.548255][T12077] overlayfs: statfs failed on './file0' [ 483.102979][ T5891] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 483.767300][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 484.123394][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.221188][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.326649][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 484.352662][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.379742][ T5891] usb 1-1: config 0 descriptor?? [ 484.692705][T12105] Invalid logical block size (18) [ 484.716817][ T5891] hub 1-1:0.0: USB hub found [ 485.075421][ T30] kauditd_printk_skb: 369 callbacks suppressed [ 485.075435][ T30] audit: type=1400 audit(2000000325.048:7386): avc: denied { write } for pid=12097 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.118092][ T30] audit: type=1400 audit(2000000325.128:7387): avc: denied { write } for pid=12097 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.193146][ T5891] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 485.228070][ T30] audit: type=1400 audit(2000000325.158:7388): avc: denied { ioctl } for pid=12085 comm="syz.0.1659" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.268639][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 485.278456][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 485.346072][ T5891] usb 1-1: USB disconnect, device number 62 [ 485.359355][ T30] audit: type=1400 audit(2000000325.158:7389): avc: denied { ioctl } for pid=12085 comm="syz.0.1659" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.449395][T12110] tmpfs: Unknown parameter 'grpquota_block_hardlimit[³C¬' [ 485.485834][ T30] audit: type=1400 audit(2000000325.168:7390): avc: denied { ioctl } for pid=12085 comm="syz.0.1659" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.586455][ T30] audit: type=1400 audit(2000000325.198:7391): avc: denied { ioctl } for pid=12085 comm="syz.0.1659" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.639618][ T30] audit: type=1400 audit(2000000325.268:7392): avc: denied { create } for pid=12097 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.796894][ T30] audit: type=1400 audit(2000000325.268:7393): avc: denied { create } for pid=12107 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 485.817545][ T30] audit: type=1400 audit(2000000325.278:7394): avc: denied { create } for pid=12107 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 485.837815][ T30] audit: type=1400 audit(2000000325.288:7395): avc: denied { map_create } for pid=12107 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 486.233965][ T5884] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 486.642577][ T5884] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 486.656670][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.674690][ T5884] usb 6-1: Product: syz [ 486.678867][ T5884] usb 6-1: Manufacturer: syz [ 486.695250][ T5884] usb 6-1: SerialNumber: syz [ 486.952578][ T5947] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 487.317325][T12138] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1671'. [ 487.360260][ T5947] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 487.375766][ T5947] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 487.498766][ T5947] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 487.519028][ T5947] usb 1-1: config 162 has no interface number 0 [ 487.528032][ T5947] usb 1-1: config 162 has no interface number 1 [ 488.052187][ T5947] usb 1-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.096981][ T5947] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 488.130755][ T5947] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 488.148675][ T5947] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 488.296480][ T5947] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 488.350149][ T5947] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 489.192086][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1667'. [ 489.418239][ T5947] usb 1-1: config 162 interface 79 has no altsetting 0 [ 489.432654][ T5947] usb 1-1: config 162 interface 183 has no altsetting 0 [ 489.440314][ T5947] usb 1-1: string descriptor 0 read error: -71 [ 489.446748][ T5947] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 489.492854][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.543206][ T5947] usb 1-1: can't set config #162, error -71 [ 489.581450][ T5947] usb 1-1: USB disconnect, device number 63 [ 489.689569][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 489.719185][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 489.775133][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 489.797053][ T5884] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 489.832785][ T5884] usb 6-1: USB disconnect, device number 37 [ 489.843018][ T5891] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 489.912742][T12157] ucma_write: process 1121 (syz.2.1678) changed security contexts after opening file descriptor, this is not allowed. [ 489.968482][ T5947] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 490.026868][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.037414][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 490.047034][ T5891] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 490.059200][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.071412][ T5891] usb 5-1: config 0 descriptor?? [ 490.099558][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 490.108494][T12159] bridge_slave_1: left allmulticast mode [ 490.114448][T12159] bridge_slave_1: left promiscuous mode [ 490.120087][T12159] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.127287][ T911] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 490.136692][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 490.136705][ T30] audit: type=1400 audit(2000000330.098:7668): avc: denied { create } for pid=12156 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 490.139035][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 490.156084][ T30] audit: type=1400 audit(2000000330.098:7669): avc: denied { write } for pid=12156 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 490.168034][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 490.190193][ T30] audit: type=1400 audit(2000000330.098:7670): avc: denied { create } for pid=12156 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 490.215953][T12159] bridge_slave_0: left allmulticast mode [ 490.233320][T12159] bridge_slave_0: left promiscuous mode [ 490.244895][ T5947] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 490.255259][ T5947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.257875][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.283075][ T30] audit: type=1400 audit(2000000330.098:7671): avc: denied { read } for pid=12156 comm="syz.2.1678" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 490.284226][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 490.305806][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.306341][ T5947] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.421997][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 490.434863][T12152] dvb-usb: bulk message failed: -22 (2/0) [ 490.471781][ T30] audit: type=1400 audit(2000000330.108:7672): avc: denied { read open } for pid=12156 comm="syz.2.1678" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 490.492553][ T5891] usb 5-1: media controller created [ 490.507634][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.534091][T12161] loop8: detected capacity change from 0 to 1 [ 490.541346][T12161] Dev loop8: unable to read RDB block 1 [ 490.549629][T12161] loop8: unable to read partition table [ 490.557355][T12161] loop8: partition table beyond EOD, truncated [ 490.564420][ T911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 490.576152][ T5947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 490.588469][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 490.589116][T12161] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 490.604414][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 490.613181][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 490.632567][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 14585, setting to 1023 [ 490.659052][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 490.659237][ T30] audit: type=1400 audit(2000000330.108:7673): avc: denied { ioctl } for pid=12156 comm="syz.2.1678" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 490.695524][ T5947] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.721502][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.735673][ T5947] usb 1-1: Product: syz [ 490.742449][ T5947] usb 1-1: Manufacturer: syz [ 490.747216][ T5947] usb 1-1: SerialNumber: syz [ 490.757411][ T911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 490.767740][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.772865][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 490.807896][ T911] usb 2-1: Product: syz [ 490.813921][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 490.824424][ T5891] usb 5-1: USB disconnect, device number 44 [ 490.832435][ T30] audit: type=1400 audit(2000000330.108:7674): avc: denied { write } for pid=12156 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 490.866187][ T911] usb 2-1: Manufacturer: syz [ 490.896447][ T911] usb 2-1: SerialNumber: syz [ 490.905254][ T30] audit: type=1400 audit(2000000330.108:7675): avc: denied { create } for pid=12156 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 490.966166][ T911] usb 2-1: config 0 descriptor?? [ 490.975435][ T5891] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 491.043429][ T30] audit: type=1400 audit(2000000330.138:7676): avc: denied { ioctl } for pid=12151 comm="syz.4.1676" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.081593][ T30] audit: type=1400 audit(2000000330.148:7677): avc: denied { ioctl } for pid=12151 comm="syz.4.1676" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.366978][T12166] sit1: entered allmulticast mode [ 491.562459][ T5947] usb 1-1: 0:2 : does not exist [ 491.621256][ T5947] usb 1-1: USB disconnect, device number 64 [ 491.641244][ T5891] usb 2-1: USB disconnect, device number 54 [ 491.852843][ T5884] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 491.910239][ T7034] udevd[7034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.042582][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 492.106669][ T5884] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 492.151138][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 492.162522][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.264349][ T5884] usb 6-1: config 0 descriptor?? [ 494.216295][T12194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.454820][ T5884] usb 6-1: string descriptor 0 read error: -71 [ 494.498589][ T5884] gspca_main: sunplus-2.14.0 probing 041e:400b [ 494.573649][ T5884] gspca_sunplus: reg_w_riv err -71 [ 494.579161][ T5884] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 494.785456][T12202] tipc: Started in network mode [ 494.790407][T12202] tipc: Node identity 9659b106575c, cluster identity 4711 [ 494.798136][T12202] tipc: Enabled bearer , priority 0 [ 494.943813][T12202] syzkaller0: entered promiscuous mode [ 494.949399][T12202] syzkaller0: entered allmulticast mode [ 494.955531][T12202] tipc: Resetting bearer [ 495.012778][ T5884] usb 6-1: USB disconnect, device number 38 [ 495.099242][ T60] tipc: Resetting bearer [ 495.144754][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 495.144814][ T30] audit: type=1400 audit(2000000335.158:7924): avc: denied { read write } for pid=12201 comm="syz.0.1688" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 495.295933][ T30] audit: type=1400 audit(2000000335.158:7925): avc: denied { read write open } for pid=12201 comm="syz.0.1688" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 495.412086][T12196] tipc: Resetting bearer [ 495.557817][ T30] audit: type=1400 audit(2000000335.158:7926): avc: denied { ioctl } for pid=12201 comm="syz.0.1688" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 495.656525][ T30] audit: type=1400 audit(2000000335.158:7927): avc: denied { read } for pid=12201 comm="syz.0.1688" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 495.717322][ T30] audit: type=1400 audit(2000000335.158:7928): avc: denied { read open } for pid=12201 comm="syz.0.1688" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 495.779664][ T30] audit: type=1326 audit(2000000335.198:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.5.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8f08b8eec9 code=0x7ffc0000 [ 495.813215][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'. [ 495.830943][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'. [ 495.847915][ T911] tipc: Node number set to 3238375686 [ 495.858164][ T30] audit: type=1326 audit(2000000335.198:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.5.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f08b8eec9 code=0x7ffc0000 [ 495.891030][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'. [ 496.009987][ T30] audit: type=1326 audit(2000000335.198:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.5.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f08b8eec9 code=0x7ffc0000 [ 496.046235][T12206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.052980][T12206] audit: audit_lost=109 audit_rate_limit=0 audit_backlog_limit=64 [ 496.063806][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1689'. [ 496.132866][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.557512][T12196] tipc: Disabling bearer [ 497.942708][ T55] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 498.265400][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 498.289366][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 498.301982][ T55] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.311915][ T55] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 498.321691][ T55] usb 5-1: config 8 interface 0 has no altsetting 0 [ 498.348848][ T55] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 498.362169][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.372620][ T55] usb 5-1: Product: syz [ 498.384796][ T55] usb 5-1: Manufacturer: syz [ 498.389445][ T55] usb 5-1: SerialNumber: syz [ 498.678182][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.696722][ T55] usb 5-1: selecting invalid altsetting 0 [ 498.857444][ T55] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 498.878311][ T55] usb 5-1: USB disconnect, device number 45 [ 498.938795][ T5884] hid-generic 00A0:0006:0003.0018: item fetching failed at offset 0/15 [ 498.954591][ T5884] hid-generic 00A0:0006:0003.0018: probe with driver hid-generic failed with error -22 [ 499.086456][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.203559][ T5827] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 499.480407][ T5827] usb 1-1: config 0 has no interfaces? [ 499.486148][ T5827] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 499.512244][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.541677][ T5827] usb 1-1: config 0 descriptor?? [ 499.836038][ T5827] usb 1-1: USB disconnect, device number 65 [ 500.452852][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 500.452868][ T30] audit: type=1400 audit(2000000340.138:8279): avc: denied { create } for pid=12264 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.515398][ T30] audit: type=1400 audit(2000000340.148:8280): avc: denied { write } for pid=12264 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.587484][ T30] audit: type=1400 audit(2000000340.158:8281): avc: denied { nlmsg_write } for pid=12264 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.672581][ T30] audit: type=1400 audit(2000000340.168:8282): avc: denied { create } for pid=12264 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 500.802652][ T30] audit: type=1400 audit(2000000340.188:8283): avc: denied { write } for pid=12264 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 500.846720][ T30] audit: type=1400 audit(2000000340.198:8284): avc: denied { read } for pid=12264 comm="syz.4.1703" dev="nsfs" ino=4026533028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.905749][ T30] audit: type=1400 audit(2000000340.208:8285): avc: denied { read open } for pid=12264 comm="syz.4.1703" path="net:[4026533028]" dev="nsfs" ino=4026533028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.948836][T12273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 500.950710][T12291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 500.962310][T12273] audit: audit_lost=111 audit_rate_limit=0 audit_backlog_limit=64 [ 501.016805][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.023209][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.217729][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 501.226897][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 504.242707][ T55] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 504.433530][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.467652][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.498741][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.554742][ T55] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.591560][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.636920][ T55] usb 2-1: config 0 descriptor?? [ 504.887872][T12349] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.486842][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 505.486856][ T30] audit: type=1400 audit(2000000345.498:8591): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.638480][ T30] audit: type=1400 audit(2000000345.538:8592): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.647888][T12358] SELinux: policydb magic number 0x8000 does not match expected magic number 0xf97cff8c [ 505.712588][T12358] SELinux: failed to load policy [ 505.733832][ T30] audit: type=1400 audit(2000000345.538:8593): avc: denied { read write } for pid=12353 comm="syz.4.1726" name="comedi1" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.789138][ T30] audit: type=1400 audit(2000000345.538:8594): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.817348][ T30] audit: type=1400 audit(2000000345.538:8595): avc: denied { read write open } for pid=12353 comm="syz.4.1726" path="/dev/comedi1" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.851950][ T30] audit: type=1400 audit(2000000345.548:8596): avc: denied { allowed } for pid=12323 comm="syz.1.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 505.874479][ T30] audit: type=1400 audit(2000000345.558:8597): avc: denied { create } for pid=12323 comm="syz.1.1717" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.909594][ T30] audit: type=1400 audit(2000000345.608:8598): avc: denied { ioctl } for pid=12353 comm="syz.4.1726" path="/dev/comedi1" dev="devtmpfs" ino=1276 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.956253][ T30] audit: type=1400 audit(2000000345.618:8599): avc: denied { read write } for pid=12353 comm="syz.4.1726" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.009853][ T30] audit: type=1400 audit(2000000345.628:8600): avc: denied { read write open } for pid=12353 comm="syz.4.1726" path="/dev/vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.197199][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 506.207328][ T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 506.304841][ T55] usb 2-1: USB disconnect, device number 55 [ 506.458516][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1731'. [ 506.509396][T12372] binder: 12369:12372 unknown command 0 [ 506.525816][T12372] binder: 12369:12372 ioctl c0306201 200000000080 returned -22 [ 506.571670][T12372] binder: 12369:12372 ioctl c0306201 2000000003c0 returned -14 [ 506.644217][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.003515][ T5947] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 507.155687][ T911] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 507.312658][ T911] usb 1-1: device descriptor read/64, error -71 [ 507.349190][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 507.382564][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.403287][ T5947] usb 5-1: config 0 descriptor?? [ 507.432251][ T5947] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 507.573194][ T911] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 507.580880][ T55] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 507.722566][ T911] usb 1-1: device descriptor read/64, error -71 [ 507.742698][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 507.757920][ T55] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.769150][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.779326][ T55] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 507.789380][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.808222][ T55] usb 2-1: config 0 descriptor?? [ 507.834205][ T911] usb usb1-port1: attempt power cycle [ 508.192656][ T911] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 508.215239][ T911] usb 1-1: device descriptor read/8, error -71 [ 508.273751][ T55] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 508.473881][ T911] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 508.504660][ T911] usb 1-1: device descriptor read/8, error -71 [ 508.617945][ T911] usb usb1-port1: unable to enumerate USB device [ 509.187735][ T5827] usb 2-1: USB disconnect, device number 56 [ 509.236041][T12402] ptrace attach of "./syz-executor exec"[6654] was attempted by "./syz-executor exec"[12402] [ 509.869788][T12411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1743'. [ 509.897003][ T5947] usb 5-1: USB disconnect, device number 46 [ 510.492634][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 510.492674][ T30] audit: type=1400 audit(2000000350.408:8961): avc: denied { create } for pid=12414 comm="syz.0.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.623702][ T30] audit: type=1400 audit(2000000350.438:8962): avc: denied { write } for pid=12414 comm="syz.0.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.648654][ T30] audit: type=1400 audit(2000000350.488:8963): avc: denied { read } for pid=12414 comm="syz.0.1745" dev="nsfs" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 510.672635][ T30] audit: type=1400 audit(2000000350.488:8964): avc: denied { read open } for pid=12414 comm="syz.0.1745" path="net:[4026532934]" dev="nsfs" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 510.699062][ T30] audit: type=1400 audit(2000000350.538:8965): avc: denied { create } for pid=12414 comm="syz.0.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.773020][ T30] audit: type=1400 audit(2000000350.768:8966): avc: denied { read write } for pid=6654 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.900139][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1746'. [ 510.940575][T12415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 510.947149][T12415] audit: audit_lost=113 audit_rate_limit=0 audit_backlog_limit=64 [ 510.955005][T12415] audit: backlog limit exceeded [ 510.960341][T12415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.196699][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 512.070232][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'. [ 512.511790][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'. [ 512.523176][T12429] nbd: device at index 64 is going down [ 513.772566][ T5947] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 513.952548][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 514.930369][ T5947] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 515.011488][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.164920][ T7006] udevd[7006]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.337519][ T5947] usb 5-1: config 0 has no interface number 0 [ 515.370292][ T6106] udevd[6106]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.398027][T12459] syzkaller1: entered promiscuous mode [ 515.403585][T12459] syzkaller1: entered allmulticast mode [ 515.411015][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 515.431036][T12459] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 515.481799][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.497249][ T5947] usb 5-1: Product: syz [ 515.501481][ T5947] usb 5-1: Manufacturer: syz [ 515.535299][ T5947] usb 5-1: SerialNumber: syz [ 515.553442][ T30] kauditd_printk_skb: 799 callbacks suppressed [ 515.553456][ T30] audit: type=1400 audit(2000000355.558:9173): avc: denied { prog_load } for pid=12462 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.556236][ T5947] usb 5-1: config 0 descriptor?? [ 515.559760][ T30] audit: type=1400 audit(2000000355.568:9174): avc: denied { bpf } for pid=12462 comm="syz.0.1758" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.588781][ T5947] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 515.629382][ T5947] uvcvideo 5-1:0.105: No valid video chain found. [ 515.719847][ T30] audit: type=1400 audit(2000000355.598:9175): avc: denied { ioctl } for pid=12443 comm="syz.4.1754" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.744812][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.762389][ T30] audit: type=1400 audit(2000000355.598:9176): avc: denied { ioctl } for pid=12443 comm="syz.4.1754" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.924852][ T30] audit: type=1400 audit(2000000355.598:9177): avc: denied { ioctl } for pid=12443 comm="syz.4.1754" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.972928][ T30] audit: type=1400 audit(2000000355.688:9178): avc: denied { read write } for pid=6654 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 515.997118][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.322808][ T5947] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 516.411784][ T30] audit: type=1400 audit(2000000355.688:9179): avc: denied { read write open } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.441314][ T30] audit: type=1400 audit(2000000355.688:9180): avc: denied { ioctl } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.513010][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 516.531863][ T5947] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 516.542025][ T5947] usb 1-1: config 0 has no interface number 0 [ 516.549211][T12474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 516.550392][T12479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 516.564713][ T5947] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.592035][ T5947] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.616895][ T5947] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 516.629023][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.657451][ T5947] usb 1-1: config 0 descriptor?? [ 516.844488][ T5884] usb 5-1: USB disconnect, device number 47 [ 517.374190][ T5947] usbhid 1-1:0.1: can't add hid device: -71 [ 517.380236][ T5947] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 517.395918][ T5947] usb 1-1: USB disconnect, device number 70 [ 520.626141][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 520.626160][ T30] audit: type=1400 audit(2000000360.638:9431): avc: denied { create } for pid=12526 comm="syz.1.1773" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 520.704052][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'. [ 521.017498][ T30] audit: type=1400 audit(2000000360.678:9432): avc: denied { create } for pid=12526 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.314207][ T30] audit: type=1400 audit(2000000360.688:9433): avc: denied { write } for pid=12526 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.476616][ T30] audit: type=1400 audit(2000000360.688:9434): avc: denied { read } for pid=12526 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.576385][ T30] audit: type=1400 audit(2000000360.698:9435): avc: denied { read } for pid=12526 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.673303][ T30] audit: type=1400 audit(2000000360.708:9436): avc: denied { write } for pid=12526 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.799283][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 521.808536][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 521.877391][ T30] audit: type=1400 audit(2000000360.748:9437): avc: denied { ioctl } for pid=12526 comm="syz.1.1773" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39284 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.161441][ T30] audit: type=1400 audit(2000000360.758:9438): avc: denied { ioctl } for pid=12526 comm="syz.1.1773" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39284 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.346091][T12539] netlink: 'syz.5.1776': attribute type 5 has an invalid length. [ 522.357774][ T30] audit: type=1400 audit(2000000360.768:9439): avc: denied { ioctl } for pid=12526 comm="syz.1.1773" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39284 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.484527][ T30] audit: type=1400 audit(2000000360.628:9430): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.644024][ T5884] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 522.653281][ T5827] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 522.825804][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 523.468250][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.567227][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 523.587332][ T5827] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 523.607010][ T5827] usb 1-1: config 0 has no interface number 0 [ 523.613252][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.623723][ T5827] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=ee.0c [ 523.633974][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.642868][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.693210][ T5827] usb 1-1: config 0 descriptor?? [ 523.717190][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 523.723560][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.741539][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.835894][ T5884] usb 3-1: 0:2 : does not exist [ 524.380890][ T5827] usb 1-1: string descriptor 0 read error: -71 [ 524.646230][ T5827] usb 1-1: unsupported MDLM descriptors [ 524.663381][T12562] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 524.671487][ T5827] usb 1-1: USB disconnect, device number 71 [ 524.686963][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 525.674533][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 525.674563][ T30] audit: type=1400 audit(2000000365.638:9721): avc: denied { prog_load } for pid=12567 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.892598][ T30] audit: type=1400 audit(2000000365.648:9722): avc: denied { bpf } for pid=12567 comm="syz.1.1785" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.944215][ T30] audit: type=1400 audit(2000000365.658:9723): avc: denied { perfmon } for pid=12567 comm="syz.1.1785" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.989649][ T30] audit: type=1400 audit(2000000365.768:9724): avc: denied { create } for pid=12567 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 526.042123][ T30] audit: type=1400 audit(2000000365.838:9725): avc: denied { ioctl } for pid=12545 comm="syz.2.1778" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 526.101454][ T30] audit: type=1400 audit(2000000365.838:9726): avc: denied { ioctl } for pid=12545 comm="syz.2.1778" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 526.241708][T12584] ALSA: mixer_oss: invalid OSS volume 'u' [ 526.281359][ T30] audit: type=1400 audit(2000000365.848:9727): avc: denied { write } for pid=12567 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 526.285566][ T5884] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 526.389592][ T30] audit: type=1400 audit(2000000365.898:9728): avc: denied { prog_load } for pid=12567 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.389645][ T5884] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 526.429514][ T30] audit: type=1400 audit(2000000365.898:9729): avc: denied { bpf } for pid=12567 comm="syz.1.1785" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 526.507104][ T30] audit: type=1400 audit(2000000365.898:9730): avc: denied { perfmon } for pid=12567 comm="syz.1.1785" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 526.508403][ T5884] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 526.616475][ T5884] usb 3-1: USB disconnect, device number 61 [ 527.293048][T12591] netlink: 'syz.5.1792': attribute type 11 has an invalid length. [ 527.827977][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 527.867881][T12591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.105243][T12602] Invalid logical block size (18) [ 528.253903][T12607] binder: 12603:12607 unknown command 0 [ 528.272703][T12607] binder: 12603:12607 ioctl c0306201 200000000080 returned -22 [ 528.317796][T12607] binder: 12603:12607 ioctl c0306201 2000000003c0 returned -14 [ 530.900481][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 530.900514][ T30] audit: type=1400 audit(2000000370.848:10061): avc: denied { prog_load } for pid=12643 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 531.101651][ T30] audit: type=1400 audit(2000000370.848:10062): avc: denied { bpf } for pid=12643 comm="syz.1.1807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.165400][ T30] audit: type=1400 audit(2000000370.878:10063): avc: denied { mounton } for pid=12643 comm="syz.1.1807" path="/356" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 531.352749][ T30] audit: type=1400 audit(2000000370.888:10064): avc: denied { mount } for pid=12643 comm="syz.1.1807" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 531.377853][ T30] audit: type=1400 audit(2000000371.098:10065): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.408538][ T30] audit: type=1400 audit(2000000371.098:10066): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.433644][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.662725][ T5898] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 531.733980][ T5884] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 531.816499][ T30] audit: type=1400 audit(2000000371.098:10067): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.845680][ T30] audit: type=1400 audit(2000000371.158:10068): avc: denied { read write } for pid=6654 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.899120][ T30] audit: type=1400 audit(2000000371.158:10069): avc: denied { read write open } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.939275][ T30] audit: type=1400 audit(2000000371.168:10070): avc: denied { ioctl } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.980817][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.993209][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.056155][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.070965][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.094969][ T5884] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 532.113798][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.134153][ T5898] usb 3-1: Product: syz [ 532.138334][ T5898] usb 3-1: Manufacturer: syz [ 532.157741][ T5884] usb 5-1: config 0 has no interface number 0 [ 532.173248][ T5898] usb 3-1: SerialNumber: syz [ 532.177976][ T5884] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 532.218796][ T5884] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.255792][ T5884] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 532.272623][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.288619][ T5884] usb 5-1: Product: syz [ 532.295239][ T5884] usb 5-1: Manufacturer: syz [ 532.305655][ T5884] usb 5-1: SerialNumber: syz [ 532.321703][ T5884] usb 5-1: config 0 descriptor?? [ 532.783459][ T5884] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 532.983013][ T5884] usb 5-1: USB disconnect, device number 48 [ 533.534643][T12671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.544358][T12671] block device autoloading is deprecated and will be removed. [ 533.890351][T12690] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 533.922675][ T5884] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 533.970866][T12690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.073474][T12690] netlink: 'syz.5.1822': attribute type 2 has an invalid length. [ 534.081373][T12690] netlink: 'syz.5.1822': attribute type 11 has an invalid length. [ 534.089482][T12690] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1822'. [ 534.111073][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.127109][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.150387][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.164102][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.190297][ T5884] usb 5-1: Product: syz [ 534.196122][ T5884] usb 5-1: Manufacturer: syz [ 534.200748][ T5884] usb 5-1: SerialNumber: syz [ 534.407818][T12697] binder: 12696:12697 unknown command 0 [ 534.419750][T12697] binder: 12696:12697 ioctl c0306201 200000000080 returned -22 [ 534.481901][T12697] binder: 12696:12697 ioctl c0306201 2000000003c0 returned -14 [ 534.574490][ T55] usb 3-1: USB disconnect, device number 62 [ 534.702668][ T5884] usb 5-1: 0:2 : does not exist [ 534.895325][T12709] Invalid logical block size (18) [ 535.913078][ T30] kauditd_printk_skb: 280 callbacks suppressed [ 535.913095][ T30] audit: type=1400 audit(2000000375.918:10351): avc: denied { create } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.492689][ T30] audit: type=1400 audit(2000000375.918:10352): avc: denied { write } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.644572][T12724] Process accounting resumed [ 536.663168][ T30] audit: type=1400 audit(2000000375.918:10353): avc: denied { read } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.696582][ T30] audit: type=1400 audit(2000000375.918:10354): avc: denied { read } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.717395][ T30] audit: type=1400 audit(2000000375.978:10355): avc: denied { read write } for pid=12722 comm="syz.5.1833" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 536.743551][ T30] audit: type=1400 audit(2000000375.978:10356): avc: denied { read write open } for pid=12722 comm="syz.5.1833" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 536.768122][ T30] audit: type=1400 audit(2000000375.988:10357): avc: denied { mounton } for pid=12722 comm="syz.5.1833" path="/341/file0" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 536.791967][ T30] audit: type=1400 audit(2000000375.988:10358): avc: denied { create } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.813111][ T30] audit: type=1400 audit(2000000375.998:10359): avc: denied { getopt } for pid=12722 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.835104][T12732] netlink: 'syz.0.1835': attribute type 4 has an invalid length. [ 536.845395][ T5898] lo speed is unknown, defaulting to 1000 [ 536.851123][ T5898] 3yz0: Port: 1 Link DOWN [ 536.867315][ T30] audit: type=1400 audit(2000000376.048:10360): avc: denied { create } for pid=12725 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 536.981752][T12734] netlink: 'syz.0.1835': attribute type 4 has an invalid length. [ 537.072130][ T911] lo speed is unknown, defaulting to 1000 [ 537.078098][ T911] 3yz0: Port: 1 Link ACTIVE [ 537.941914][ T5884] usb 5-1: USB disconnect, device number 49 [ 538.200140][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.379429][T12755] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 538.387207][T12755] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1842'. [ 538.533192][ T5884] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 539.199953][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.229790][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.264590][ T5884] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.273844][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.294313][ T5884] usb 6-1: Product: syz [ 539.306606][ T5884] usb 6-1: Manufacturer: syz [ 539.312793][ T5884] usb 6-1: SerialNumber: syz [ 540.242679][ T5884] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 540.865488][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 540.986952][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 541.058607][ T5884] usb 1-1: config 7 has an invalid descriptor of length 141, skipping remainder of the config [ 541.069662][ T5884] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 541.079561][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 541.079575][ T30] audit: type=1400 audit(2000000380.888:10579): avc: denied { create } for pid=12773 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.234235][ T5884] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=61.95 [ 541.249796][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.259336][ T5884] usb 1-1: Product: syz [ 541.264422][ T5884] usb 1-1: SerialNumber: syz [ 541.272131][ T30] audit: type=1400 audit(2000000380.908:10580): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.339453][ T30] audit: type=1400 audit(2000000380.918:10581): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.431980][ T30] audit: type=1400 audit(2000000380.928:10582): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.497852][ T30] audit: type=1400 audit(2000000380.938:10583): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.558992][ T30] audit: type=1400 audit(2000000380.958:10584): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.594457][ T30] audit: type=1400 audit(2000000380.968:10585): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.620234][ T30] audit: type=1400 audit(2000000380.988:10586): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.728244][ T30] audit: type=1400 audit(2000000380.998:10587): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.022822][ T30] audit: type=1400 audit(2000000381.018:10588): avc: denied { ioctl } for pid=12766 comm="syz.0.1845" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.116645][ T911] usb 6-1: USB disconnect, device number 39 [ 542.220467][T12788] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 542.220467][T12788] The task syz.4.1849 (12788) triggered the difference, watch for misbehavior. [ 542.617152][ T5884] usb 1-1: USB disconnect, device number 72 [ 543.072836][ T55] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 543.241219][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 543.252181][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.266581][ T55] usb 2-1: config 0 descriptor?? [ 543.386698][ T55] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 543.682560][ T5947] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 543.822672][ T5898] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 543.862573][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 543.876729][ T5947] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 543.892961][ T911] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 543.900653][ T5947] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 543.924853][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.972683][ T5898] usb 3-1: device descriptor read/64, error -71 [ 544.062581][ T911] usb 1-1: Using ep0 maxpacket: 32 [ 544.082759][ T911] usb 1-1: config 0 has an invalid interface number: 192 but max is 0 [ 544.102702][ T911] usb 1-1: config 0 has no interface number 0 [ 544.118102][ T911] usb 1-1: config 0 interface 192 has no altsetting 0 [ 544.145309][ T911] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 544.167672][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.182548][ T911] usb 1-1: Product: syz [ 544.186807][ T911] usb 1-1: Manufacturer: syz [ 544.199304][ T911] usb 1-1: SerialNumber: syz [ 544.217421][ T911] usb 1-1: config 0 descriptor?? [ 544.232060][ T5947] usb 6-1: string descriptor 0 read error: -71 [ 544.246028][ T5947] hub 6-1:32.0: bad descriptor, ignoring hub [ 544.248952][ T5898] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 544.252227][ T5947] hub 6-1:32.0: probe with driver hub failed with error -5 [ 544.333815][ T5947] usb 6-1: USB disconnect, device number 40 [ 544.414683][ T7006] udevd[7006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.433155][ T5898] usb 3-1: device descriptor read/64, error -71 [ 544.467895][ T911] kvaser_usb 1-1:0.192: error -EPROTO: Cannot get software info [ 544.476168][ T911] kvaser_usb 1-1:0.192: probe with driver kvaser_usb failed with error -71 [ 544.508945][ T911] usb 1-1: USB disconnect, device number 73 [ 544.545924][ T5898] usb usb3-port1: attempt power cycle [ 544.893265][ T5898] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 545.053759][ T5898] usb 3-1: device descriptor read/8, error -71 [ 545.229037][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1859'. [ 545.316725][ T5898] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 545.344582][ T5898] usb 3-1: device descriptor read/8, error -71 [ 545.518842][ T911] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 545.531097][ T5898] usb usb3-port1: unable to enumerate USB device [ 546.040934][ T5965] usb 2-1: USB disconnect, device number 57 [ 546.087973][ T30] kauditd_printk_skb: 380 callbacks suppressed [ 546.087989][ T30] audit: type=1400 audit(2000000386.098:10969): avc: denied { read write } for pid=6654 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.112512][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.130737][ T30] audit: type=1400 audit(2000000386.108:10970): avc: denied { read write open } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.156186][ T30] audit: type=1400 audit(2000000386.108:10971): avc: denied { ioctl } for pid=6654 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.188485][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.250695][ T911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.274465][ T30] audit: type=1400 audit(2000000386.118:10972): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.292514][ T911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.335430][ T30] audit: type=1400 audit(2000000386.118:10973): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.352640][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.401920][ T30] audit: type=1400 audit(2000000386.118:10974): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.462067][ T30] audit: type=1400 audit(2000000386.118:10975): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.517436][ T30] audit: type=1400 audit(2000000386.118:10976): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.524900][ T911] usb 5-1: config 0 descriptor?? [ 546.582185][ T30] audit: type=1400 audit(2000000386.148:10977): avc: denied { ioctl } for pid=12818 comm="syz.4.1860" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.661074][ T30] audit: type=1400 audit(2000000386.258:10978): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.716575][T12847] netlink: 'syz.2.1868': attribute type 15 has an invalid length. [ 547.752755][T12847] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1868'. [ 547.936883][T12850] FAULT_INJECTION: forcing a failure. [ 547.936883][T12850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.960939][T12850] CPU: 0 UID: 0 PID: 12850 Comm: syz.0.1866 Not tainted syzkaller #0 PREEMPT(full) [ 547.960966][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.960976][T12850] Call Trace: [ 547.960982][T12850] [ 547.960989][T12850] dump_stack_lvl+0x16c/0x1f0 [ 547.961017][T12850] should_fail_ex+0x512/0x640 [ 547.961043][T12850] _copy_to_iter+0x463/0x1710 [ 547.961070][T12850] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 547.961097][T12850] ? __pfx__copy_to_iter+0x10/0x10 [ 547.961120][T12850] ? __skb_recv_datagram+0x1b2/0x220 [ 547.961143][T12850] ? __pfx___skb_recv_datagram+0x10/0x10 [ 547.961165][T12850] simple_copy_to_iter+0x46/0x90 [ 547.961182][T12850] __skb_datagram_iter+0x129/0x900 [ 547.961199][T12850] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 547.961217][T12850] ? skb_recv_datagram+0x88/0xc0 [ 547.961239][T12850] skb_copy_datagram_iter+0x40/0x50 [ 547.961258][T12850] netlink_recvmsg+0x27e/0xa90 [ 547.961285][T12850] ? __pfx_netlink_recvmsg+0x10/0x10 [ 547.961307][T12850] ? is_bpf_text_address+0x94/0x1a0 [ 547.961342][T12850] sock_recvmsg+0x1f9/0x250 [ 547.961370][T12850] ____sys_recvmsg+0x218/0x6b0 [ 547.961399][T12850] ? __pfx_____sys_recvmsg+0x10/0x10 [ 547.961434][T12850] ? __lock_acquire+0x62e/0x1ce0 [ 547.961459][T12850] ___sys_recvmsg+0x114/0x1a0 [ 547.961481][T12850] ? __pfx____sys_recvmsg+0x10/0x10 [ 547.961506][T12850] ? find_held_lock+0x2b/0x80 [ 547.961544][T12850] do_recvmmsg+0x2fe/0x750 [ 547.961571][T12850] ? __pfx_do_recvmmsg+0x10/0x10 [ 547.961597][T12850] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 547.961628][T12850] ? __fget_files+0x20e/0x3c0 [ 547.961653][T12850] __x64_sys_recvmmsg+0x22a/0x280 [ 547.961677][T12850] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 547.961708][T12850] do_syscall_64+0xcd/0x4e0 [ 547.961733][T12850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.961751][T12850] RIP: 0033:0x7fc460f8eec9 [ 547.961766][T12850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.961783][T12850] RSP: 002b:00007fc461df0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 547.961800][T12850] RAX: ffffffffffffffda RBX: 00007fc4611e6090 RCX: 00007fc460f8eec9 [ 547.961811][T12850] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000008 [ 547.961822][T12850] RBP: 00007fc461df0090 R08: 0000000000000000 R09: 0000000000000000 [ 547.961833][T12850] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 547.961843][T12850] R13: 00007fc4611e6128 R14: 00007fc4611e6090 R15: 00007ffd440ef888 [ 547.961867][T12850] [ 548.587351][ T911] usbhid 5-1:0.0: can't add hid device: -71 [ 548.604475][T12859] binder: 12858:12859 unknown command 0 [ 548.610241][T12859] binder: 12858:12859 ioctl c0306201 200000000080 returned -22 [ 548.623116][ T911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 548.648997][ T911] usb 5-1: USB disconnect, device number 50 [ 548.727476][T12859] binder: 12858:12859 ioctl c0306201 2000000003c0 returned -14 [ 548.752643][ T5898] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 548.903773][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 548.926593][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.945857][T12867] hpfs: hpfs_map_sector(): read error [ 548.951423][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 548.976216][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 548.987702][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.006365][ T5898] usb 3-1: config 0 descriptor?? [ 549.028164][ T5898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 549.043353][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 549.062053][T12869] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 549.189113][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 550.973855][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.995968][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.032744][ T24] ------------[ cut here ]------------ [ 551.038739][ T24] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 551.049069][ T24] WARNING: CPU: 1 PID: 24 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780 [ 551.058967][ T24] Modules linked in: [ 551.063263][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 551.072554][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 551.082697][ T24] Workqueue: mld mld_ifc_work [ 551.087445][ T24] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 551.093775][ T24] Code: a4 a0 d4 00 00 00 e8 08 0c ef f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 c0 23 c3 8c e8 1a 93 ad f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 7f 57 f7 e9 f5 fc ff [ 551.113569][ T24] RSP: 0018:ffffc900001e6a60 EFLAGS: 00010286 [ 551.119691][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8179bd78 [ 551.127763][ T24] RDX: ffff88801deb0000 RSI: ffffffff8179bd85 RDI: 0000000000000001 [ 551.135826][ T24] RBP: ffff88802fd52de8 R08: 0000000000000001 R09: 0000000000000000 [ 551.143865][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 551.151858][ T24] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802fd52df0 [ 551.159870][ T24] FS: 0000000000000000(0000) GS:ffff888124f75000(0000) knlGS:0000000000000000 [ 551.168852][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.175521][ T24] CR2: 00007f8f099e5f70 CR3: 00000000317eb000 CR4: 00000000003526f0 [ 551.183519][ T24] Call Trace: [ 551.186791][ T24] [ 551.189727][ T24] rate_control_send_low+0x52a/0x810 [ 551.195029][ T24] rate_control_get_rate+0x1be/0x5e0 [ 551.200334][ T24] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 551.206034][ T24] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 551.212163][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 551.217185][ T24] invoke_tx_handlers_late+0x1172/0x27d0 [ 551.222886][ T24] ? find_held_lock+0x2b/0x80 [ 551.225198][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 551.225209][ T30] audit: type=1400 audit(2000000391.238:11379): avc: denied { write } for pid=12902 comm="syz.4.1884" path="/proc/1329/net/mcfilter" dev="proc" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 551.227610][ T24] ? ieee80211_tx_h_select_key+0x2c9/0x1bc0 [ 551.264289][ T24] ieee80211_tx_dequeue+0x3086/0x43f0 [ 551.269712][ T24] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 551.275454][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 551.280498][ T24] ? ieee80211_next_txq+0xda/0xa50 [ 551.285625][ T24] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 551.291697][ T24] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 551.298299][ T24] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 551.304425][ T24] ? mark_held_locks+0x49/0x80 [ 551.309202][ T24] ? __local_bh_enable_ip+0xa4/0x120 [ 551.314512][ T24] ieee80211_queue_skb+0x12af/0x1fe0 [ 551.319840][ T24] ieee80211_tx+0x2e4/0x460 [ 551.324375][ T24] ? __pfx_ieee80211_tx+0x10/0x10 [ 551.329425][ T24] ? ieee80211_skb_resize+0x22a/0x630 [ 551.334819][ T24] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 551.339371][ T30] audit: type=1400 audit(2000000391.348:11380): avc: denied { write } for pid=12902 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.340224][ T24] ieee80211_xmit+0x30f/0x3e0 [ 551.365495][ T24] __ieee80211_subif_start_xmit+0x880/0x1390 [ 551.371486][ T24] ? neigh_resolve_output+0x53a/0x940 [ 551.376873][ T24] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 551.383338][ T24] ? mld_sendpack+0xac1/0x1350 [ 551.388151][ T24] ? skb_network_protocol+0x126/0x6d0 [ 551.393584][ T24] ieee80211_subif_start_xmit+0x11b/0x1970 [ 551.399451][ T24] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 551.405781][ T24] ? dev_hard_start_xmit+0x97/0x740 [ 551.411017][ T24] dev_hard_start_xmit+0x97/0x740 [ 551.416110][ T24] __dev_queue_xmit+0xa46/0x4490 [ 551.421101][ T24] ? __lock_acquire+0x62e/0x1ce0 [ 551.426116][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 551.431543][ T24] ? register_lock_class+0x41/0x4c0 [ 551.436783][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 551.441771][ T24] ? __asan_memcpy+0x3c/0x60 [ 551.446429][ T24] ? eth_header+0x11c/0x1f0 [ 551.450976][ T24] neigh_resolve_output+0x53a/0x940 [ 551.456253][ T24] ip6_finish_output2+0xad1/0x1cf0 [ 551.457477][ T30] audit: type=1400 audit(2000000391.398:11381): avc: denied { read } for pid=12902 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.461402][ T24] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 551.487165][ T30] audit: type=1400 audit(2000000391.408:11382): avc: denied { read } for pid=12902 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.488793][ T24] __ip6_finish_output+0x3cd/0x1010 [ 551.514507][ T24] ip6_output+0x253/0x710 [ 551.514985][ T30] audit: type=1400 audit(2000000391.528:11383): avc: denied { read write } for pid=12910 comm="syz.5.1886" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.518874][ T24] mld_sendpack+0xac1/0x1350 [ 551.547222][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 551.552310][ T24] mld_ifc_work+0x740/0xbf0 [ 551.556906][ T24] process_one_work+0x9cf/0x1b70 [ 551.561903][ T24] ? __pfx_process_one_work+0x10/0x10 [ 551.564733][ T30] audit: type=1400 audit(2000000391.558:11384): avc: denied { read write open } for pid=12910 comm="syz.5.1886" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.567348][ T24] ? assign_work+0x1a0/0x250 [ 551.596537][ T24] worker_thread+0x6c8/0xf10 [ 551.599881][ T30] audit: type=1400 audit(2000000391.558:11385): avc: denied { ioctl } for pid=12910 comm="syz.5.1886" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.601175][ T24] ? __pfx_worker_thread+0x10/0x10 [ 551.629804][ T30] audit: type=1400 audit(2000000391.558:11386): avc: denied { ioctl } for pid=12910 comm="syz.5.1886" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.631420][ T24] kthread+0x3c2/0x780 [ 551.660655][ T24] ? __pfx_kthread+0x10/0x10 [ 551.661033][ T30] audit: type=1400 audit(2000000391.568:11387): avc: denied { ioctl } for pid=12910 comm="syz.5.1886" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.665296][ T24] ? rcu_is_watching+0x12/0xc0 [ 551.665325][ T24] ? __pfx_kthread+0x10/0x10 [ 551.665348][ T24] ret_from_fork+0x56a/0x730 [ 551.665368][ T24] ? __pfx_kthread+0x10/0x10 [ 551.665389][ T24] ret_from_fork_asm+0x1a/0x30 [ 551.713830][ T24] [ 551.716843][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 551.724106][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 551.733269][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 551.743306][ T24] Workqueue: mld mld_ifc_work [ 551.747964][ T24] Call Trace: [ 551.751218][ T24] [ 551.754121][ T24] dump_stack_lvl+0x3d/0x1f0 [ 551.758691][ T24] vpanic+0x640/0x6f0 [ 551.762651][ T24] ? __rate_control_send_low+0x667/0x780 [ 551.768259][ T24] panic+0xca/0xd0 [ 551.771952][ T24] ? __pfx_panic+0x10/0x10 [ 551.776373][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 551.781460][ T24] check_panic_on_warn+0xab/0xb0 [ 551.786369][ T24] __warn+0xf6/0x3c0 [ 551.790238][ T24] ? __pfx_vprintk_emit+0x10/0x10 [ 551.795246][ T24] ? __rate_control_send_low+0x667/0x780 [ 551.800867][ T24] report_bug+0x3c3/0x580 [ 551.805191][ T24] ? __rate_control_send_low+0x667/0x780 [ 551.810810][ T24] handle_bug+0x184/0x210 [ 551.815127][ T24] exc_invalid_op+0x17/0x50 [ 551.819612][ T24] asm_exc_invalid_op+0x1a/0x20 [ 551.824439][ T24] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 551.830659][ T24] Code: a4 a0 d4 00 00 00 e8 08 0c ef f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 c0 23 c3 8c e8 1a 93 ad f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 7f 57 f7 e9 f5 fc ff [ 551.850240][ T24] RSP: 0018:ffffc900001e6a60 EFLAGS: 00010286 [ 551.856283][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8179bd78 [ 551.864234][ T24] RDX: ffff88801deb0000 RSI: ffffffff8179bd85 RDI: 0000000000000001 [ 551.872186][ T24] RBP: ffff88802fd52de8 R08: 0000000000000001 R09: 0000000000000000 [ 551.880141][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 551.888093][ T24] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802fd52df0 [ 551.896057][ T24] ? __warn_printk+0x198/0x350 [ 551.900823][ T24] ? __warn_printk+0x1a5/0x350 [ 551.905577][ T24] rate_control_send_low+0x52a/0x810 [ 551.910851][ T24] rate_control_get_rate+0x1be/0x5e0 [ 551.916148][ T24] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 551.921799][ T24] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 551.927859][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 551.932803][ T24] invoke_tx_handlers_late+0x1172/0x27d0 [ 551.938426][ T24] ? find_held_lock+0x2b/0x80 [ 551.943097][ T24] ? ieee80211_tx_h_select_key+0x2c9/0x1bc0 [ 551.948971][ T24] ieee80211_tx_dequeue+0x3086/0x43f0 [ 551.954344][ T24] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 551.960048][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 551.965074][ T24] ? ieee80211_next_txq+0xda/0xa50 [ 551.970194][ T24] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 551.976262][ T24] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 551.982830][ T24] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 551.988880][ T24] ? mark_held_locks+0x49/0x80 [ 551.993624][ T24] ? __local_bh_enable_ip+0xa4/0x120 [ 551.998902][ T24] ieee80211_queue_skb+0x12af/0x1fe0 [ 552.004172][ T24] ieee80211_tx+0x2e4/0x460 [ 552.008666][ T24] ? __pfx_ieee80211_tx+0x10/0x10 [ 552.013687][ T24] ? ieee80211_skb_resize+0x22a/0x630 [ 552.019054][ T24] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 552.024414][ T24] ieee80211_xmit+0x30f/0x3e0 [ 552.029074][ T24] __ieee80211_subif_start_xmit+0x880/0x1390 [ 552.035037][ T24] ? neigh_resolve_output+0x53a/0x940 [ 552.040391][ T24] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 552.046792][ T24] ? mld_sendpack+0xac1/0x1350 [ 552.051566][ T24] ? skb_network_protocol+0x126/0x6d0 [ 552.056936][ T24] ieee80211_subif_start_xmit+0x11b/0x1970 [ 552.062742][ T24] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 552.068995][ T24] ? dev_hard_start_xmit+0x97/0x740 [ 552.074177][ T24] dev_hard_start_xmit+0x97/0x740 [ 552.079191][ T24] __dev_queue_xmit+0xa46/0x4490 [ 552.084114][ T24] ? __lock_acquire+0x62e/0x1ce0 [ 552.089041][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 552.094391][ T24] ? register_lock_class+0x41/0x4c0 [ 552.099598][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 552.104538][ T24] ? __asan_memcpy+0x3c/0x60 [ 552.109123][ T24] ? eth_header+0x11c/0x1f0 [ 552.113618][ T24] neigh_resolve_output+0x53a/0x940 [ 552.118826][ T24] ip6_finish_output2+0xad1/0x1cf0 [ 552.123923][ T24] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 552.130781][ T24] __ip6_finish_output+0x3cd/0x1010 [ 552.135979][ T24] ip6_output+0x253/0x710 [ 552.140311][ T24] mld_sendpack+0xac1/0x1350 [ 552.144895][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 552.149924][ T24] mld_ifc_work+0x740/0xbf0 [ 552.154415][ T24] process_one_work+0x9cf/0x1b70 [ 552.159338][ T24] ? __pfx_process_one_work+0x10/0x10 [ 552.164691][ T24] ? assign_work+0x1a0/0x250 [ 552.169265][ T24] worker_thread+0x6c8/0xf10 [ 552.173892][ T24] ? __pfx_worker_thread+0x10/0x10 [ 552.178994][ T24] kthread+0x3c2/0x780 [ 552.183044][ T24] ? __pfx_kthread+0x10/0x10 [ 552.187626][ T24] ? rcu_is_watching+0x12/0xc0 [ 552.192375][ T24] ? __pfx_kthread+0x10/0x10 [ 552.196957][ T24] ret_from_fork+0x56a/0x730 [ 552.201536][ T24] ? __pfx_kthread+0x10/0x10 [ 552.206115][ T24] ret_from_fork_asm+0x1a/0x30 [ 552.210866][ T24] [ 552.214074][ T24] Kernel Offset: disabled [ 552.218390][ T24] Rebooting in 86400 seconds..